Tag: cpanel
44 articles
Industry reports
The Field of cPanel Alternatives Keeps Widening. A Brand-New One Comes From Inside cPanel’s Ecosystem.
cPanel's per-account pricing keeps rising, and a real field of alternatives has grown around it, from hosts running their own panel to free independents.
Security
Roundcube Shipped Eleven Security Fixes Without a Single CVE Number
Roundcube patched eleven flaws in 1.7.3 and 1.6.18. The notes carry no CVE numbers, and cPanel has not shipped the update yet.
Industry reports
Hosting’s Next Six Months Are Already Scheduled: Five Dates to Prepare For
CRA reporting, the licensing season, the Sedo window, the .com increase and the end of egress fees: the deadlines ahead, and what to do before each.
Security
Two of cPanel’s Three New Flaws Cross the Line Between Accounts
cPanel's July 29 patch fixes three flaws. Two cross the boundary between accounts on a shared server, one without any login at all.
Security
A Malware Campaign Is Using GitHub Actions to Hunt Unpatched cPanel Servers
A new campaign uses GitHub's own build servers to hunt cPanel and WHM servers still exposed to CVE-2026-41940, and steal their secrets.
Expert's Voice
The Hosting Price Squeeze, Part 1: Why Your Costs Keep Climbing
Energy, hardware, consolidation, and per-account licensing are squeezing hosting margins at once. A veteran founder breaks down what is really driving the rise.
Security
Roundcube’s Zero-Click Webmail XSS, and How Fast It Reached cPanel
Roundcube's zero-click webmail XSS (CVSS 7.2) was patched July 5 and shipped in cPanel 134.0.45 on July 14. Here is what shared hosts should check.
Security
The Exploit Record: How Government Networks Keep Getting Breached
A cPanel zero-day hit Guam. CISA got breached through Ivanti. Salt Typhoon accessed US wiretap systems. The case file of government breaches.
Security
CVE-2026-48172: LiteSpeed cPanel Plugin Root Privilege Escalation, CVSS 10.0, Actively Exploited
LiteSpeed cPanel Plugin CVE-2026-48172 (CVSS 10.0) lets any cPanel user execute scripts as root. Actively exploited. Patch to 2.4.7 now.
Security
Skynethosting Took Its Entire cPanel Fleet Offline on May 1. Two Weeks Later, Some Are Still Down.
Skynethosting took its entire cPanel fleet offline on May 1 in response to CVE-2026-41940, and as of May 14 some customer servers had been down for nearly two weeks, with one reseller publicly reporting a 30 percent client loss during the outage.
Reach hosting professionals
Sponsor webhosting.today and get in front of hosting buyers, founders and engineers.
50k+monthly readers
777articles